Unrated severityNVD Advisory· Published Oct 15, 2015· Updated Jun 17, 2026

CVE-2015-7726

Description

Cross-site scripting (XSS) vulnerability in role deletion in the Web-based Development Workbench in SAP HANA DB 1.00.091.00.1418659308 allows remote authenticated users to inject arbitrary web script or HTML via the role name, aka SAP Security Note 2153898.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

SAP/Hana2 versions
cpe:2.3:a:sap:hana:1.00.091.00:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:sap:hana:1.00.091.00:*:*:*:*:*:*:*
- (no CPE)range: =1.00.091.00.1418659308

Patches

Vulnerability mechanics

References

seclists.org/fulldisclosure/2015/Sep/114nvd
www.onapsis.com/blog/analyzing-sap-security-notes-may-2015-editionnvd
www.onapsis.com/research/security-advisories/sap-hana-xss-role-deletion-through-web-based-workbenchnvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000